Description
Detects executables packed with UPX/modified UPX open source packer.
8d3e1524f58f0432d0031b49218350faf5f936e1eb7b0394c58e316337e2c831
General
Target
Size
Sample
8d3e1524f58f0432d0031b49218350faf5f936e1eb7b0394c58e316337e2c831
2MB
220521-xxhw9scgd8
Score
8 /10
MD5
SHA1
SHA256
SHA512
5e4f6f9342dd61cb750a2bf2462e82a9
ea85b1c851ec413fb9f7a4df6b7990f67d20a623
8d3e1524f58f0432d0031b49218350faf5f936e1eb7b0394c58e316337e2c831
cba140903fc2a37395feef57732232ffdc8cac5031f79bf0e8c723fba82ebf143ce635906506b0a1c263b72ba17b956849fcc08d1d00f412efbc9ffa0a0a5f1a
Malware Config
Targets
Target
MD5
Filesize
8d3e1524f58f0432d0031b49218350faf5f936e1eb7b0394c58e316337e2c831
5e4f6f9342dd61cb750a2bf2462e82a9
2MB
Score
8/10
SHA1
SHA256
SHA512
ea85b1c851ec413fb9f7a4df6b7990f67d20a623
8d3e1524f58f0432d0031b49218350faf5f936e1eb7b0394c58e316337e2c831
cba140903fc2a37395feef57732232ffdc8cac5031f79bf0e8c723fba82ebf143ce635906506b0a1c263b72ba17b956849fcc08d1d00f412efbc9ffa0a0a5f1a
Tags
Signatures
-
UPX packed file
-
Writes to the Master Boot Record (MBR)
Description
Bootkits write to the MBR to gain persistence at a level below the operating system.
Tags
TTPs
-
Drops file in System32 directory
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks